CVE Catalog
CVE-2026-62830
CriticalCVSS 9.9Exploitation Probability (EPSS)
Low risk0.43%
35th percentile - higher than 35% of all known CVEs
Summary
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
Risk Assessment
An authorized attacker can gain elevated privileges, potentially leading to unauthorized access to Azure resources and compromise of infrastructure security.
Recommendation
Apply security updates provided by Microsoft for Azure SRE Agent and restrict user permissions to the minimum required.
Original NVD description (English source)
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.